>> [root@services sysconfig]# vim nfs
>> #######################################FILE##########################################
>> SECURE_NFS="yes"
>> #
>> # Define which protocol versions mountd
>> # will advertise. The values are "no" or "yes"
>> # with yes being the default
>> MOUNTD_NFS_V1="no"
>> MOUNTD_NFS_V2="no"
>> MOUNTD_NFS_V3="no"
>
> I'm not sure whether this is still the case but you used to need a
> "yes" for one of these because nfsv4 needs mountd to export mounts
> even though mounted isn't used for mounting an export and doesn't need
> to be allowed through the firewall.

Fortunately this is no longer the case -- NFSv4 is much more 
self-contained/simpler than previous versions and a lot of this is due 
to simplification of the formerly bizaar mountd baggage it used to 
carry. Of course, all that goes out the window if you need to export to 
any clients < v4.